ruby-jwt/.github/workflows/push_gem.yml at 957dc7379504b943fdf946ba128041b9d0db17bd · anakinj/ruby-jwt · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
---
"on":
  push:
    tags:
      - v*

name: Push Gem
jobs:
  build:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Set up Ruby
        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
        with:
          bundler-cache: false
          ruby-version: ruby
      - name: Build gem
        run: |
          expected_tag="v$(ruby -Ilib -rjwt/version -e 'print JWT.gem_version')"
          test "$GITHUB_REF_NAME" = "$expected_tag"
          gem build ruby-jwt.gemspec
      - name: Upload gem
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: jwt-gem
          path: jwt-*.gem
          retention-days: 1

  push:
    needs: build
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    steps:
      - name: Set up Ruby
        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
        with:
          bundler-cache: false
          ruby-version: ruby
      - name: Download gem
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: jwt-gem
      - uses: rubygems/configure-rubygems-credentials@dc5a8d8553e6ee01fc26761a49e99e733d17954a # v2.1.0
        with:
          role-to-assume: ${{ secrets.RUBYGEMS_PUSH_ROLE }}
      - name: Push gem
        run: gem push jwt-*.gem

  wait:
    needs: push
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - name: Set up Ruby
        uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
        with:
          bundler-cache: false
          ruby-version: ruby
      - name: Download gem
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: jwt-gem
      - name: Wait for release to propagate
        run: |
          gem install rubygems-await
          gem_tuple="$(ruby -rrubygems/package -e '
              spec = Gem::Package.new(Dir["jwt-*.gem"].fetch(0)).spec
              print [spec.name, spec.version, spec.platform].join(":")
            ')"
          gem await "${gem_tuple}"